$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3292/LcO_WKfD4suVkd5E2HmTwNP3MnM.mft File: LcO_WKfD4suVkd5E2HmTwNP3MnM.mft (raw, json) Hash identifier: Ne4VKHNExbG06QjaE59ZsUHAn/CdpAdnbA9toXEmJFM= Subject key identifier: 36:74:07:F6:67:E8:B7:FA:6A:B4:E4:16:F4:85:B0:12:C3:A3:1C:C4 Authority key identifier: 2D:C3:BF:58:A7:C3:E2:CB:95:91:DE:44:D8:79:93:C0:D3:F7:32:73 Certificate issuer: /CN=2DC3BF58A7C3E2CB9591DE44D87993C0D3F73273 Certificate serial: 061D Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LcO_WKfD4suVkd5E2HmTwNP3MnM.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3292/LcO_WKfD4suVkd5E2HmTwNP3MnM.mft Manifest number: 061D Signing time: Sat 26 Apr 2025 13:08:06 +0000 Manifest this update: Sat 26 Apr 2025 13:08:06 +0000 Manifest next update: Sat 26 Apr 2025 19:08:06 +0000 Files and hashes: 1: LcO_WKfD4suVkd5E2HmTwNP3MnM.crl (hash: wEJVFdCHAQdnweBBY0RXBnqAdeRBUogVkMaPSlgJIuY=) Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3292/LcO_WKfD4suVkd5E2HmTwNP3MnM.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3292/LcO_WKfD4suVkd5E2HmTwNP3MnM.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LcO_WKfD4suVkd5E2HmTwNP3MnM.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1xHsDTeBWKRHb-bqfXClSpUZWhE.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1xHsDTeBWKRHb-bqfXClSpUZWhE.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1xHsDTeBWKRHb-bqfXClSpUZWhE.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Apr 2025 17:09:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1565 (0x61d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2DC3BF58A7C3E2CB9591DE44D87993C0D3F73273 Validity Not Before: Apr 26 13:08:06 2025 GMT Not After : Apr 3 08:00:09 2026 GMT Subject: CN=367407F667E8B7FA6AB4E416F485B012C3A31CC4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:43:b9:90:a7:b9:1c:e8:12:8a:e5:8c:fb:aa: 6e:31:ee:eb:e5:b8:70:28:bd:51:a0:e3:9f:2a:d0: 77:8d:76:61:8b:9f:17:31:84:33:50:66:8a:09:bf: fa:99:0d:10:db:88:7e:b5:43:0c:12:1f:a7:fb:49: 3d:3f:c9:c4:0b:d4:a8:68:3f:82:bb:59:5a:b0:47: 27:a5:35:11:a1:ce:9a:12:83:1c:5c:81:e7:e8:70: d0:7a:ce:72:da:f7:6a:54:19:7c:d8:3c:c6:d5:21: fd:9d:fe:7e:b1:2a:ff:b3:ba:e7:e4:9d:5a:64:98: cb:25:63:14:3f:58:b6:f1:bf:80:c0:17:5d:98:c6: 3d:4e:f5:83:4e:be:e0:a7:74:13:93:92:9d:8d:0f: 2c:a0:b1:cb:c9:3d:55:83:4b:93:28:17:68:0b:19: b6:73:45:2d:61:38:c0:0a:e2:20:7f:57:ab:66:b8: 30:62:e6:dc:bd:28:4e:19:81:fb:31:92:b4:d5:46: 3a:56:52:c7:8c:ee:55:1c:b9:53:22:5e:23:da:23: 43:d1:4e:d5:9b:42:ab:50:2a:dc:bc:bf:5e:9a:36: 47:dc:38:18:a2:52:e4:b8:9a:20:cf:aa:af:a2:05: 4d:01:7b:f0:9d:72:5b:ff:b4:8c:08:33:ed:ee:6b: 36:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:74:07:F6:67:E8:B7:FA:6A:B4:E4:16:F4:85:B0:12:C3:A3:1C:C4 X509v3 Authority Key Identifier: keyid:2D:C3:BF:58:A7:C3:E2:CB:95:91:DE:44:D8:79:93:C0:D3:F7:32:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3292/LcO_WKfD4suVkd5E2HmTwNP3MnM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LcO_WKfD4suVkd5E2HmTwNP3MnM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3292/LcO_WKfD4suVkd5E2HmTwNP3MnM.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a7:f9:50:f3:b7:e4:8a:70:14:94:0c:0c:84:b8:95:19:39:c0: d8:2d:df:92:e1:5e:7a:43:23:56:4e:0f:2f:d0:88:4d:20:e8: c0:91:f5:47:78:17:e8:81:85:68:bc:e6:ae:91:e8:62:5e:d9: 2f:8f:3c:de:b2:61:1c:d3:5f:66:53:55:10:dc:96:f8:51:9e: 61:e1:6e:17:7f:99:f9:7b:0a:6c:30:75:64:35:2d:77:02:9c: 61:4c:52:b1:af:2b:8f:a6:17:e8:58:e4:83:80:b6:7d:28:b7: 4a:0a:ab:05:40:70:0d:12:6e:30:ec:d3:84:2d:9a:23:4d:f7: 4c:a1:1f:80:66:7e:55:ff:0b:29:78:0d:4b:f3:e3:a1:29:3e: 37:a5:83:cd:35:e3:aa:32:0b:5d:0a:85:35:a0:c2:be:c6:2b: 9c:de:d1:6f:a3:67:38:cf:f2:d9:c2:4b:d8:93:0c:f8:00:d9: e3:f8:18:93:f7:2c:2f:e1:65:db:7e:9e:10:7b:9b:8b:04:b7: f3:2f:00:c8:4d:1b:25:9d:02:4f:28:01:3b:ef:b7:88:53:0e: b0:f0:6d:0e:1c:69:61:86:f7:3f:e9:fa:64:17:16:40:e6:67: 6c:82:ea:da:99:21:db:26:a7:0b:bf:26:ce:a6:ae:1c:07:18: 5a:68:35:7d -----BEGIN CERTIFICATE----- MIIE8DCCA9igAwIBAgICBh0wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMkRD M0JGNThBN0MzRTJDQjk1OTFERTQ0RDg3OTkzQzBEM0Y3MzI3MzAeFw0yNTA0MjYx MzA4MDZaFw0yNjA0MDMwODAwMDlaMDMxMTAvBgNVBAMTKDM2NzQwN0Y2NjdFOEI3 RkE2QUI0RTQxNkY0ODVCMDEyQzNBMzFDQzQwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCpQ7mQp7kc6BKK5Yz7qm4x7uvluHAovVGg458q0HeNdmGLnxcx hDNQZooJv/qZDRDbiH61QwwSH6f7ST0/ycQL1KhoP4K7WVqwRyelNRGhzpoSgxxc gefocNB6znLa92pUGXzYPMbVIf2d/n6xKv+zuufknVpkmMslYxQ/WLbxv4DAF12Y xj1O9YNOvuCndBOTkp2NDyygscvJPVWDS5MoF2gLGbZzRS1hOMAK4iB/V6tmuDBi 5ty9KE4ZgfsxkrTVRjpWUseM7lUcuVMiXiPaI0PRTtWbQqtQKty8v16aNkfcOBii UuS4miDPqq+iBU0Be/Cdclv/tIwIM+3uazaPAgMBAAGjggIMMIICCDAdBgNVHQ4E FgQUNnQH9mfot/pqtOQW9IWwEsOjHMQwHwYDVR0jBBgwFoAULcO/WKfD4suVkd5E 2HmTwNP3MnMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzI5 Mi9MY09fV0tmRDRzdVZrZDVFMkhtVHdOUDNNbk0uY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL0xjT19XS2ZENHN1VmtkNUUySG1Ud05QM01uTS5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMyOTIvTGNPX1dLZkQ0c3VW a2Q1RTJIbVR3TlAzTW5NLm1mdDAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUAMCEG CCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQELBQAD ggEBAKf5UPO35IpwFJQMDIS4lRk5wNgt35LhXnpDI1ZODy/QiE0g6MCR9Ud4F+iB hWi85q6R6GJe2S+PPN6yYRzTX2ZTVRDclvhRnmHhbhd/mfl7CmwwdWQ1LXcCnGFM UrGvK4+mF+hY5IOAtn0ot0oKqwVAcA0SbjDs04QtmiNN90yhH4BmflX/Cyl4DUvz 46EpPjelg80146oyC10KhTWgwr7GK5ze0W+jZzjP8tnCS9iTDPgA2eP4GJP3LC/h Zdt+nhB7m4sEt/MvAMhNGyWdAk8oATvvt4hTDrDwbQ4caWGG9z/p+mQXFkDmZ2yC 6tqZIdsmpwu/Js6mrhwHGFpoNX0= -----END CERTIFICATE-----Generated at Sat Apr 26 15:18:30 2025 by rpki-client